You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@geode.apache.org by "Swapnil Bawaskar (JIRA)" <ji...@apache.org> on 2017/06/20 22:38:00 UTC
[jira] [Updated] (GEODE-3108) secure ability to create lucene
indexes
[ https://issues.apache.org/jira/browse/GEODE-3108?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Swapnil Bawaskar updated GEODE-3108:
------------------------------------
Description:
Treat queries as a CLUSTER resource so that administrators can control ability to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:LUCENE should be able to run the following gfsh commands:
{noformat}
create lucene index
destroy lucene index
{noformat}
A user with CLUSTER:READ:LUCENE should be able to run the following commands:
{noformat}
describe lucene index
list lucene indexes
{noformat}
was:
Treat queries as a CLUSTER resource so that administrators can control ability to manage indices (both OQL and Lucene), and manage Continuous queries.
Only a user with CLUSTER:MANAGE:QUERY should be able to run the following gfsh commands:
{noformat}
create index
define index
destroy index
create defined indexes
close durable-cq
close durable-client
clear defined indexes
create lucene index
destroy lucene index
{noformat}
And the following JMX bean methods:
{noformat}
CacheServerMXBean.closeAllContinuousQuery
CacheServerMXBean.closeContinuousQuery
DistributedSystemMXBean.setQueryCollectionsDepth
DistributedSystemMXBean.setQueryResultSetLimit
{noformat}
A user with CLUSTER:READ:QUERY should be able to run the following commands:
{noformat}
list indexes
describe lucene index
list lucene indexes
{noformat}
> secure ability to create lucene indexes
> ---------------------------------------
>
> Key: GEODE-3108
> URL: https://issues.apache.org/jira/browse/GEODE-3108
> Project: Geode
> Issue Type: Sub-task
> Components: security
> Reporter: Swapnil Bawaskar
> Assignee: Kenneth Howe
>
> Treat queries as a CLUSTER resource so that administrators can control ability to manage indices (both OQL and Lucene), and manage Continuous queries.
> Only a user with CLUSTER:MANAGE:LUCENE should be able to run the following gfsh commands:
> {noformat}
> create lucene index
> destroy lucene index
> {noformat}
> A user with CLUSTER:READ:LUCENE should be able to run the following commands:
> {noformat}
> describe lucene index
> list lucene indexes
> {noformat}
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)